Eric Dumazet 567ef0554b inet: frags: break the 2GB limit for frags storage ... commit 3e67f106f619dcfaf6f4e2039599bdb69848c714 upstream. Some users are willing to provision huge amounts of memory to be able to perform reassembly reasonnably well under pressure. Current memory tracking is using one atomic_t and integers. Switch to atomic_long_t so that 64bit arches can use more than 2GB, without any cost for 32bit arches. Note that this patch avoids an overflow error, if high_thresh was set to ~2GB, since this test in inet_frag_alloc() was never true : if (... || frag_mem_limit(nf) > nf->high_thresh) Tested: $ echo 16000000000 >/proc/sys/net/ipv4/ipfrag_high_thresh <frag DDOS> $ grep FRAG /proc/net/sockstat FRAG: inuse 14705885 memory 16000002880 $ nstat -n ; sleep 1 ; nstat | grep Reas IpReasmReqds 3317150 0.0 IpReasmFails 3317112 0.0 Signed-off-by: Eric Dumazet <edumazet@google.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-02-08 11:25:31 +01:00
..
netfilter	netfilter: x_tables: set module owner for icmp(6) matches	2018-08-24 13:26:58 +02:00
af_inet.c	gso_segment: Reset skb->mac_len after modifying network header	2018-09-29 03:08:52 -07:00
ah4.c	ipsec: check return value of skb_to_sgvec always	2018-04-13 19:50:23 +02:00
arp.c	arp: fix arp_filter on l3slave devices	2018-04-13 19:50:24 +02:00
cipso_ipv4.c	net/ipv4: defensive cipso option parsing	2018-11-21 09:27:34 +01:00
datagram.c
devinet.c	ipv4: igmp: guard against silly MTU values	2018-01-02 20:33:24 +01:00
esp4.c	ipsec: check return value of skb_to_sgvec always	2018-04-13 19:50:23 +02:00
fib_frontend.c	net: ipv4: Fix memory leak in network namespace dismantle	2019-02-06 19:43:03 +01:00
fib_lookup.h
fib_rules.c
fib_semantics.c	net: ipv4: update fnhe_pmtu when first hop's MTU changes	2018-10-20 09:52:36 +02:00
fib_trie.c	net: ipv4: Fix memory leak in network namespace dismantle	2019-02-06 19:43:03 +01:00
fou.c	gro: Allow tunnel stacking in the case of FOU/GUE	2018-11-10 07:41:38 -08:00
gre_demux.c
gre_offload.c	net: add recursion limit to GRO	2016-11-15 07:46:38 +01:00
icmp.c
igmp.c	net: igmp: add a missing rcu locking section	2018-02-16 20:09:37 +01:00
inet_connection_sock.c	tcp/dccp: fix other lockdep splats accessing ireq_opt	2017-11-18 11:11:07 +01:00
inet_diag.c
inet_fragment.c	inet: frags: remove inet_frag_maybe_warn_overflow()	2019-02-08 11:25:31 +01:00
inet_hashtables.c
inet_lro.c
inet_timewait_sock.c	soreuseport: initialise timewait reuseport field	2018-05-16 10:06:50 +02:00
inetpeer.c
ip_forward.c
ip_fragment.c	inet: frags: break the 2GB limit for frags storage	2019-02-08 11:25:31 +01:00
ip_gre.c
ip_input.c	net: Fix usage of pskb_trim_rcsum	2019-02-06 19:43:02 +01:00
ip_options.c
ip_output.c	ip: hash fragments consistently	2018-07-28 07:45:02 +02:00
ip_sockglue.c	ip: on queued skb use skb_header_pointer instead of pskb_may_pull	2019-01-26 09:42:49 +01:00
ip_tunnel.c	ip_tunnel: Fix name string concatenate in __ip_tunnel_create()	2018-12-13 09:21:29 +01:00
ip_tunnel_core.c	ip_tunnel: don't force DF when MTU is locked	2018-11-27 16:07:57 +01:00
ip_vti.c	Revert "vti4: Don't override MTU passed on link creation via IFLA_MTU"	2018-05-30 22:11:35 +02:00
ipcomp.c
ipconfig.c	ipconfig: Correctly initialise ic_nameservers	2018-08-06 16:24:38 +02:00
ipip.c	ipip: only increase err_count for some certain type icmp in ipip_err	2017-11-18 11:11:06 +01:00
ipmr.c	ipv4: Fix potential Spectre v1 vulnerability	2019-01-13 10:05:27 +01:00
Kconfig	ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV	2018-08-15 17:42:05 +02:00
Makefile
netfilter.c	netfilter: use skb_to_full_sk in ip_route_me_harder	2018-03-18 11:17:51 +01:00
ping.c	ipv4: fix memory leaks in udp_sendmsg, ping_v4_sendmsg	2018-05-26 08:48:46 +02:00
proc.c	inet: frags: break the 2GB limit for frags storage	2019-02-08 11:25:31 +01:00
protocol.c
raw.c	net: ipv4: fix for a race condition in raw_sendmsg	2018-01-02 20:33:25 +01:00
route.c	ipv4: lock mtu in fnhe when received PMTU < net.ipv4.route.min_pmtu	2018-05-30 07:49:04 +02:00
syncookies.c	tcp/dccp: fix ireq->opt races	2017-11-18 11:11:06 +01:00
sysctl_net_ipv4.c	ipv4: Return EINVAL when ping_group_range sysctl doesn't map to user ns	2018-07-25 10:18:16 +02:00
tcp.c	tcp: use an RB tree for ooo receive queue	2018-10-13 09:11:34 +02:00
tcp_bic.c
tcp_cdg.c
tcp_cong.c	tcp: disallow cwnd undo when switching congestion control	2017-06-14 13:16:19 +02:00
tcp_cubic.c
tcp_dctcp.c	tcp: remove DELAYED ACK events in DCTCP	2018-08-24 13:26:59 +02:00
tcp_diag.c
tcp_fastopen.c	tcp: initialize max window for a new fastopen socket	2017-02-04 09:45:09 +01:00
tcp_highspeed.c
tcp_htcp.c
tcp_hybla.c
tcp_illinois.c	net/tcp/illinois: replace broken algorithm reference link	2018-05-30 07:49:02 +02:00
tcp_input.c	tcp: add tcp_ooo_try_coalesce() helper	2018-10-13 09:11:35 +02:00
tcp_ipv4.c	tcp: use an RB tree for ooo receive queue	2018-10-13 09:11:34 +02:00
tcp_lp.c	tcp: fix wraparound issue in tcp_lp	2017-05-14 13:32:58 +02:00
tcp_memcontrol.c
tcp_metrics.c
tcp_minisocks.c	tcp: use an RB tree for ooo receive queue	2018-10-13 09:11:34 +02:00
tcp_offload.c
tcp_output.c	tcp: fix NULL ref in tail loss probe	2018-12-17 21:55:09 +01:00
tcp_probe.c
tcp_recovery.c
tcp_scalable.c
tcp_timer.c	net: tcp: close sock if net namespace is exiting	2018-01-31 12:06:14 +01:00
tcp_vegas.c	tcp: fix under-evaluated ssthresh in TCP Vegas	2017-12-25 14:22:15 +01:00
tcp_vegas.h
tcp_veno.c
tcp_westwood.c
tcp_yeah.c	tcp: cwnd does not increase in TCP YeAH	2016-09-30 10:18:34 +02:00
tunnel4.c
udp.c	ipv4: fix memory leaks in udp_sendmsg, ping_v4_sendmsg	2018-05-26 08:48:46 +02:00
udp_diag.c
udp_impl.h
udp_offload.c	net: avoid skb_warn_bad_offload false positives on UFO	2017-08-12 19:29:08 -07:00
udp_tunnel.c
udplite.c
xfrm4_input.c
xfrm4_mode_beet.c
xfrm4_mode_transport.c
xfrm4_mode_tunnel.c
xfrm4_output.c
xfrm4_policy.c	ipv4: lock mtu in fnhe when received PMTU < net.ipv4.route.min_pmtu	2018-05-30 07:49:04 +02:00
xfrm4_protocol.c
xfrm4_state.c
xfrm4_tunnel.c